$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft File: MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft (raw, json) Hash identifier: ZLR+hhh7/IMOFqTmEtepWYi3DQ2tWLw+XDyn+9R8864= Subject key identifier: 82:60:70:47:CC:0B:85:33:44:D4:43:5B:2B:EB:2D:3F:72:DE:92:C4 Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 Certificate issuer: /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft Manifest number: 0F Signing time: Sun 19 Oct 2025 01:32:30 +0000 Manifest this update: Sun 19 Oct 2025 01:32:29 +0000 Manifest next update: Sun 26 Oct 2025 01:32:29 +0000 Files and hashes: 1: MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl (hash: YuaiU4jU0JHtXIVtsjWizQcvT2L0Owi1tMjTNwrQUOc=) 2: 47D5EEA2A5FF11F08004B67CC4F9AE02.roa (hash: iNZxFEtD+6QgSBLSeVmK2n+qo/Nt14F+67ViKVlRAEM=) 3: 48DA881CA5FF11F08004B67CC4F9AE02.roa (hash: 5/hHV8J+lxETAhi9OjQgXXrOD+uCMVkbm4MOQS088qU=) 4: 485C422CA5FF11F08004B67CC4F9AE02.roa (hash: ybEJ6ypns4vD/7VDe+vdDoeXho9P9fe6phtZ1wIUdQE=) 5: 474BBE8AA5FF11F08004B67CC4F9AE02.roa (hash: OgKrAW2/hv9VaZwZaVK6Fa0FucKowEYv+xHmxWRfKg0=) 6: 4988E222A5FF11F08004B67CC4F9AE02.roa (hash: KjekvWkyVk2ufW3sUCxTn0USOTGpHbibGBSsaXBYXww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Validity Not Before: Oct 19 01:32:29 2025 GMT Not After : Oct 26 01:32:29 2025 GMT Subject: CN=68f43fae-2a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6e:04:b9:80:63:c1:44:a1:1d:c4:77:fa:30: 1e:32:d7:4e:f9:c3:d0:78:4b:62:53:32:43:03:a0: 1b:07:96:f3:0b:55:a2:d8:bc:c0:52:28:c7:a0:3f: 46:64:10:58:3b:ee:94:68:82:ff:70:7f:af:11:e9: e3:01:6e:25:62:b6:2b:94:38:60:58:d3:b2:6f:c4: fb:78:9d:bc:6c:25:b7:f3:06:d3:2d:04:04:c4:b6: 2d:9c:46:ae:1b:21:c4:29:f8:4c:36:a0:3f:71:d0: 19:2e:80:05:02:46:95:5f:c5:04:03:4d:2e:0d:cf: 80:1d:b5:62:13:39:68:df:0e:46:6a:86:cf:9c:10: 32:1f:85:ba:ea:c2:d7:06:3c:5b:ed:b5:86:8e:59: 3c:95:0a:ea:a1:a2:a1:27:6e:f7:eb:4b:1e:b9:00: af:0b:99:d3:da:d6:5e:90:42:60:92:f9:0e:2e:74: b5:65:e5:04:8e:09:06:dd:ef:d0:69:a8:34:00:ac: ae:e1:62:87:92:82:e9:46:9c:eb:77:df:24:ee:4a: 33:58:8a:1b:03:25:aa:60:ef:fa:e5:48:47:17:34: d8:6f:47:fc:5a:7f:97:2a:60:e1:c3:72:d9:d9:55: 93:65:e9:2b:80:06:9d:a2:f1:cc:34:bd:58:65:a0: 3e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:60:70:47:CC:0B:85:33:44:D4:43:5B:2B:EB:2D:3F:72:DE:92:C4 X509v3 Authority Key Identifier: keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:e4:44:ff:f9:16:a6:8a:e0:d1:6a:f4:db:60:0c:49:da:1e: 41:c5:8f:08:22:2c:bc:e5:ce:39:bc:66:15:3b:7e:e8:c3:b1: 1b:1c:2f:bc:b3:25:25:91:ed:e7:f1:4b:69:ee:ff:de:30:2a: 15:cc:1c:b5:88:06:f3:37:08:f6:f6:cc:95:35:99:73:af:cd: 77:16:7c:52:27:a9:60:4b:73:1f:0e:d1:a2:d3:1a:e9:2d:e1: 82:98:f9:a8:ec:53:c7:75:91:02:8d:f0:86:6d:38:77:1f:59: 2b:73:03:6b:d9:ad:38:0e:63:0f:1f:4c:ba:7f:20:0f:60:5e: 50:96:c7:97:41:4e:4c:5c:24:fc:f8:6a:40:f9:1c:c9:94:35: 85:33:f4:b5:d1:f1:f3:ac:90:ae:b6:d6:17:20:e0:08:e9:1a: 3d:26:64:68:a8:58:39:8f:7b:54:f0:dc:3d:82:7a:d6:23:a1: 91:ff:b3:69:39:33:04:b2:74:dd:5a:54:ac:73:77:a4:e6:29: 8c:28:f3:a0:b6:bd:7b:b5:37:25:93:97:c7:72:22:d1:d6:9a: 28:e6:06:ff:f5:1e:c4:59:6e:7b:96:cf:fe:5a:a9:8a:8e:bd: e2:06:7e:1d:b4:73:c4:46:58:a5:3b:ef:96:e4:81:35:5f:be: 25:7a:6d:34 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzQ5MzExMC8GA1UEBRMoMzEzMTFDRkNDMTQwMUJENkQwRTZCNkIzOTE2N0I2NUMy MTA5MjExNDAeFw0yNTEwMTkwMTMyMjlaFw0yNTEwMjYwMTMyMjlaMBgxFjAUBgNV BAMTDTY4ZjQzZmFlLTJhNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDabgS5gGPBRKEdxHf6MB4y1075w9B4S2JTMkMDoBsHlvMLVaLYvMBSKMegP0Zk EFg77pRogv9wf68R6eMBbiVitiuUOGBY07JvxPt4nbxsJbfzBtMtBATEti2cRq4b IcQp+Ew2oD9x0BkugAUCRpVfxQQDTS4Nz4AdtWITOWjfDkZqhs+cEDIfhbrqwtcG PFvttYaOWTyVCuqhoqEnbvfrSx65AK8LmdPa1l6QQmCS+Q4udLVl5QSOCQbd79Bp qDQArK7hYoeSgulGnOt33yTuSjNYihsDJapg7/rlSEcXNNhvR/xaf5cqYOHDctnZ VZNl6SuABp2i8cw0vVhloD7JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgmBwR8wL hTNE1ENbK+stP3LeksQwHwYDVR0jBBgwFoAUMTEc/MFAG9bQ5razkWe2XCEJIRQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNDkzL0U1MkMxNEMwOUZG QTExRjBCQUQ1MEI2MUM0RjlBRTAyL01URWNfTUZBRzliUTVyYXprV2UyWENFSklS US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVRFY19NRkFHOWJRNXJhemtXZTJYQ0VKSVJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz NDkzL0U1MkMxNEMwOUZGQTExRjBCQUQ1MEI2MUM0RjlBRTAyL01URWNfTUZBRzli UTVyYXprV2UyWENFSklSUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJvkRP/5FqaK4NFq9NtgDEnaHkHFjwgiLLzlzjm8ZhU7fujDsRscL7yz JSWR7efxS2nu/94wKhXMHLWIBvM3CPb2zJU1mXOvzXcWfFInqWBLcx8O0aLTGukt 4YKY+ajsU8d1kQKN8IZtOHcfWStzA2vZrTgOYw8fTLp/IA9gXlCWx5dBTkxcJPz4 akD5HMmUNYUz9LXR8fOskK621hcg4AjpGj0mZGioWDmPe1Tw3D2CetYjoZH/s2k5 MwSydN1aVKxzd6TmKYwo86C2vXu1NyWTl8dyItHWmijmBv/1HsRZbnuWz/5aqYqO veIGfh20c8RGWKU775bkgTVfviV6bTQ= -----END CERTIFICATE-----Generated at Mon Oct 20 03:50:03 2025 by rpki-client